CVE-2010-4258, branch master Exploit based on a faulty clone(2) implementation in Linux < 2.6.36.2 that allows overwrite of arbitrary kernel word with NULL. Research and personal-security use only. https://git.zx2c4.com/CVE-2010-4258/atom/?h=master 2011-04-20T22:06:01Z Investigating this bug: http://permalink.gmane.org/gmane.linux.network/192898 2011-04-20T22:06:01Z Jason A. Donenfeld Jason@zx2c4.com 2011-04-20T22:06:01Z urn:sha1:30a4cec8986bf490a24b20c0063d07b1e953698c Pidmap deref in the exploit. 2011-04-20T21:24:57Z Jason A. Donenfeld Jason@zx2c4.com 2011-04-20T21:24:57Z urn:sha1:e8fc3aca4223c6252699f7dbccfe4d91a7c2e3bd New null pointer deref. 2011-04-20T21:18:02Z Jason A. Donenfeld Jason@zx2c4.com 2011-04-20T21:18:02Z urn:sha1:d33f0596c80a4fe466403a8bd8796e4e02f1ecf1 Add test for CVE-2010-2960 2011-03-10T18:03:50Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-10T18:03:50Z urn:sha1:db5c556004bc1f3ad67d95239dcd02dba838ee81 add date 2011-03-10T05:19:20Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-10T05:19:20Z urn:sha1:784cb0d242b7a103f2bc66938e3f93c42cf86256 Add introductory message to socket_test. 2011-03-10T05:14:52Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-10T05:14:52Z urn:sha1:de92ded14e56baf05eaef2eac42e34adb1d022f0 Give credit. 2011-03-10T00:42:10Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-10T00:42:10Z urn:sha1:f640b07bf5058d931c9d06fcd1756f888e949435 Add netfilter oops test. 2011-03-10T00:35:19Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-10T00:35:19Z urn:sha1:48c8d5c5d0050a4dd6fa8a8f7d0ac76acc5b4e97 Usleep 2011-03-09T17:46:34Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-09T17:46:34Z urn:sha1:4fb52b716429c66de2b55f8bfe23008fdd9da62e Dual shutdown. 2011-03-09T17:42:08Z Jason A. Donenfeld Jason@zx2c4.com 2011-03-09T17:42:08Z urn:sha1:e6f30cbb4d6c6400b012ae82e727a35194868048